Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e32342e302f32342d3234203d3e203233323433.roa
File:                     3139302e3131312e32342e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          BtwBNTHXJpbADeoEUYM+OUuKt8KQFZIalKwWzYakgv4=
Subject key identifier:   8A:C7:ED:97:55:63:54:11:2B:03:CE:0B:65:E3:1D:16:F5:0A:FF:36
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       2803CB209F30627571D4BA43486F550042223C4C
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e32342e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 04 Feb 2025 18:15:22 +0000
ROA not before:           Tue 04 Feb 2025 18:10:22 +0000
ROA not after:            Tue 03 Feb 2026 18:15:22 +0000
asID:                     23243
IP address blocks:        190.111.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:03:cb:20:9f:30:62:75:71:d4:ba:43:48:6f:55:00:42:22:3c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Feb  4 18:10:22 2025 GMT
            Not After : Feb  3 18:15:22 2026 GMT
        Subject: CN=8AC7ED97556354112B03CE0B65E31D16F50AFF36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fa:97:d9:8f:5b:cb:35:44:81:72:51:1e:cd:
                    ad:3b:50:8b:b8:76:fa:d6:fa:55:03:e1:17:cc:e1:
                    e1:af:54:38:42:e3:2a:3d:20:d9:0a:5e:11:ee:b9:
                    a5:3b:c3:be:60:92:bb:d3:f0:76:22:4b:4a:d9:c0:
                    48:cb:75:a9:b3:91:15:73:3b:b7:1b:6f:ba:b7:43:
                    d0:ea:04:3f:22:65:fe:5f:c7:2d:af:44:8d:c5:88:
                    07:75:55:ec:4a:0f:14:bf:5a:e0:d9:fd:1f:b9:ba:
                    ae:a6:60:61:ee:fb:1a:c8:a1:0f:a2:51:ee:86:fd:
                    f0:65:5a:20:4c:54:d5:05:9b:84:b0:9c:10:d0:91:
                    9c:6f:72:09:83:24:75:b6:ee:da:83:f4:b8:ee:46:
                    91:49:33:f1:c5:23:af:76:f9:1b:cc:f6:ef:b2:47:
                    f2:20:a9:42:6e:cf:31:fd:08:13:fd:7b:0b:06:42:
                    1d:ea:f9:e5:dc:b5:47:57:06:9c:89:14:4e:b4:32:
                    13:b3:e5:d9:1c:66:9c:4d:4a:27:8c:fa:6a:4c:77:
                    b5:5b:a7:b7:6f:8f:37:c5:6f:de:75:57:c5:23:c5:
                    77:ef:94:71:4d:13:55:66:9a:c6:a1:c3:10:1f:9a:
                    eb:67:02:d6:c8:9f:40:b4:fe:a8:d7:3e:be:12:d4:
                    07:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C7:ED:97:55:63:54:11:2B:03:CE:0B:65:E3:1D:16:F5:0A:FF:36
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e32342e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:57:e6:b5:c7:e3:b5:7d:7b:12:6a:37:db:40:db:94:67:b5:
         a0:54:3e:7f:65:63:dc:96:88:56:3f:df:32:37:47:96:8e:48:
         c6:6a:6a:7f:bd:e5:60:a5:a4:c5:8f:a3:fb:c5:60:ed:d0:2e:
         d1:5f:73:4d:1c:e1:6e:1a:2b:dd:7c:37:4f:f3:c5:18:3e:41:
         b3:50:4f:3a:89:70:99:ca:a9:8e:5e:dd:1a:31:27:4f:39:f7:
         1c:62:70:be:3f:c7:c7:c1:83:b3:f9:9b:5e:b2:b6:0a:57:68:
         ef:b7:a8:53:6b:13:d6:1d:7e:c9:73:60:35:74:bc:d2:9b:e3:
         fa:bb:55:48:c7:eb:cc:22:bb:93:e2:09:29:5f:66:f0:68:ff:
         c1:7b:33:78:ca:fd:3a:ee:45:4c:d4:eb:74:b1:8e:4a:cf:70:
         ce:02:17:f1:7a:95:96:a4:e0:d6:48:d3:96:46:25:42:fb:21:
         86:c9:19:7e:eb:b5:5f:3c:46:50:13:ff:c8:5d:b3:f5:14:df:
         9b:ed:c1:85:10:05:0c:90:76:6d:23:ca:57:2c:9c:69:56:b4:
         a9:ea:40:60:ef:b3:63:57:69:64:c0:49:96:63:c1:44:ff:8c:
         05:81:40:07:94:f3:d2:b8:ae:57:42:eb:71:3b:1c:d8:a8:f3:
         55:5f:c7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:14 2025 by rpki-client